CVE-2026-62949 | ronf asyncssh up to 2.23.x Channel asyncssh/connection.py send_pktsize infinite loop

September 16, 2026 Yanac

A vulnerability was found in ronf asyncssh up to 2.23.x. It has been classified as problematic. This affects the function _process_channel_open/_process_channel_open_confirmation of the file asyncssh/connection.py of the component Channel Handler. This manipulation of the argument send_pktsize causes infinite loop.

This vulnerability is tracked as CVE-2026-62949. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More